Filtered by vendor Zoho Subscriptions
Filtered by product Manageengine Remote Access Plus Server Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2021-42956 2 Microsoft, Zoho 2 Windows, Manageengine Remote Access Plus Server 2021-11-18 8.8 High
Zoho Remote Access Plus Server Windows Desktop Binary fixed in 10.1.2132.6 is affected by a sensitive information disclosure vulnerability. Due to improper privilege management, the process launches as the logged in user, so memory dump can be done by non-admin also. Remotely, an attacker can dump all sensitive information including DB Connection string, entire IT infrastructure details, commands executed by IT admin including credentials, secrets, private keys and more.